b054b7998af2f9b6c5c8618aca62c5488c2d8f723513dc14d6e625fd46d922ae

Sharing

Copy URL Twitter E-mail

General

Target

b054b7998af2f9b6c5c8618aca62c5488c2d8f723513dc14d6e625fd46d922ae
Size

422KB
MD5

58a05d56d2719dd812f723c4249c0910
SHA1

60c4a5ec8e9ba93499da48da02eacec9d52eae96
SHA256

b054b7998af2f9b6c5c8618aca62c5488c2d8f723513dc14d6e625fd46d922ae
SHA512

a6aaee4f336b4773cc20538b6d5774498864d5fa6076f30bd0abce138d09a1d4db9e2b35aedcdfa250ffd83db8cbed72992a714031a9a4cc6b8fa33012787404
SSDEEP

6144:PnKWmS0YAD0GhLpkshk8RpoZgo6fUSigQbXt1m7ThwS5HyL87NvWkPT07agOgEgM:ChhhVrhfHoZSfUSigkX+5wKSo7NvWkgq

Score

N/A

Malware Config

Signatures

Files

b054b7998af2f9b6c5c8618aca62c5488c2d8f723513dc14d6e625fd46d922ae
.dll windows x86

d7f941f88d61dcb559156b8455c1ff7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

tier0

Msg
CommandLine
Plat_FloatTime
Plat_GetLocalTime
?DevMsg@@YAXPBDZZ
?Lock@CThreadFastMutex@@ACEXII@Z
AssertValidStringPtr
g_Telemetry
_AssertValidWritePtr
_AssertValidReadPtr
Plat_IsInDebugSession
ReleaseThreadHandle
CreateSimpleThread
StackToolsNotify_LoadedLibrary
GetThreadedLoadLibraryFunc
?DevWarning@@YAXPBDZZ
ThreadInterlockedAssignIf64
g_ClockSpeed
Plat_MSTime
ThreadSleep
SetStackTranslationSymbolSearchPath
g_ClockSpeedSecondsMultiplier
Error
LoggingSystem_PushLoggingState
LoggingSystem_RegisterLoggingListener
Warning
g_pMemAlloc

vstdlib

RandomSeed
RandomInt
KeyValuesSystem

kernel32

ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
TlsAlloc
GetConsoleScreenBufferInfo
GetStdHandle
SetConsoleTextAttribute
OutputDebugStringA
TerminateProcess
GetCurrentProcess
CloseHandle
WaitForSingleObject
CreateProcessA
GetTempPathA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetThreadPriority
CreateThread
WaitForMultipleObjects
GetModuleFileNameA
CreateFileMappingA
CreateFileA
InterlockedDecrement
Sleep
InterlockedIncrement
SetUnhandledExceptionFilter
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
LoadLibraryExA
GetCurrentProcessId
FreeLibrary
LoadLibraryA
GetComputerNameA
GetPriorityClass
GetTickCount
GetEnvironmentVariableA
SetEvent
ResetEvent
CreateEventA
DeleteCriticalSection
LocalFree
FormatMessageA
GetLastError
GetCurrentThread
ResumeThread
DecodePointer
EncodePointer
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
GetDriveTypeW
GetFullPathNameA
CreateDirectoryA
FindNextFileA
GetModuleHandleW
ExitProcess
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetCurrentThreadId
GetCommandLineA
GetSystemTimeAsFileTime
GetFileAttributesA
WriteFile
GetModuleFileNameW
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetCurrentDirectoryW
UnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
IsProcessorFeaturePresent
RtlUnwind
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointer
LoadLibraryW
TlsGetValue
TlsSetValue
TlsFree
SetLastError
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetStringTypeW
SetEnvironmentVariableW
GetTimeZoneInformation
FlushFileBuffers
SetStdHandle
SetEndOfFile
HeapFree
HeapAlloc
GetProcessHeap
GetExitCodeProcess
WriteConsoleW
CompareStringW
CreateFileW
GetNumberOfConsoleInputEvents

user32

SetWindowTextA
DefWindowProcA
EndPaint
BeginPaint
InvalidateRect
DispatchMessageA
TranslateMessage
PeekMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

gdi32

DeleteObject
GetStockObject
CreateSolidBrush
SelectObject
Rectangle

ws2_32

recvfrom
gethostbyname
ntohs
htons
WSAStartup
select
accept
WSAGetOverlappedResult
WSASendTo
sendto
closesocket
setsockopt
bind
socket
WSASocketA
WSAGetLastError
connect
ioctlsocket
listen
WSASend
WSARecv

Exports

Exports

CreateInterface

Sections

.text
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d7f941f88d61dcb559156b8455c1ff7c

Headers

DLL Characteristics

File Characteristics

Imports

tier0

vstdlib

kernel32

user32

advapi32

gdi32

ws2_32

Exports

Exports

Sections

.text Size: 233KB - Virtual size: 232KB

.rdata Size: 43KB - Virtual size: 43KB

.data Size: 15KB - Virtual size: 89KB

.reloc Size: 22KB - Virtual size: 21KB

.text Size: 108KB - Virtual size: 108KB

.text
Size: 233KB - Virtual size: 232KB

.rdata
Size: 43KB - Virtual size: 43KB

.data
Size: 15KB - Virtual size: 89KB

.reloc
Size: 22KB - Virtual size: 21KB

.text
Size: 108KB - Virtual size: 108KB